Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-8262 is a medium-severity cross-site scripting (XSS) vulnerability in Devs Palace ERP Online version 4.0.0 and earlier. The vulnerability exists in an unspecified function within the /accounts/chart-save file, allowing remote attackers to inject malicious scripts. The exploit code is publicly available, but there are no known exploits in the wild. The vendor has not responded to disclosure attempts, and no official patch or remediation guidance is currently available. Join the discussion | CVE Database V5 | 05/11/2026, 01:45:10 UTC Added: 05/11/2026, 02:06:24 UTC |
CVE-2026-8256 is a medium severity cross-site scripting (XSS) vulnerability in Devs Palace ERP Online version 4.0.0 and earlier. The vulnerability exists in an unspecified part of the /accounts/mr-save file, allowing remote attackers to inject malicious scripts. The vendor has not responded to the disclosure, and no official patch or remediation is currently available. The vulnerability has been publicly disclosed but there are no known exploits in the wild at this time. Join the discussion | CVE Database V5 | 05/11/2026, 00:15:09 UTC Added: 05/11/2026, 01:22:17 UTC |
CVE-2026-8255 is a medium severity cross-site scripting (XSS) vulnerability in Devs Palace ERP Online version 4.0.0. The issue exists in an unspecified part of the /inventory/add_new_customer file and can be exploited remotely. The vulnerability allows an attacker to inject malicious scripts, potentially impacting users who interact with the affected functionality. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. Public exploit code exists, but no known exploitation in the wild has been reported. Join the discussion | CVE Database V5 | 05/11/2026, 00:00:19 UTC Added: 05/11/2026, 00:22:40 UTC |
A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 05/10/2026, 02:00:11 UTC Added: 05/10/2026, 03:21:55 UTC |
A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affects unknown code of the component Inventory Edit Item Page. The manipulation of the argument Item Name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 04/20/2026, 14:45:11 UTC Added: 04/20/2026, 15:16:10 UTC |
Showing 1 to 5 of 5 results